ID #1288

How to whitelist a file from proactive behavior monitor?

You can whitelist the file from the eScan protection center GUI.

 

Steps:

1. Open the eScan Protection Center.

2. Goto File-Antivirus >> Reports.

3. Select the executable from the list, right click and then click on "Add to whitelist".

 

 

Note: All recurring suspicious actions are, by default, blocked.

 

For Expert Users Only:

The block can be removed either by user-confirmation dialog box using method-1 given below:  

    Method-1:

    1. Pause eScan protection (Right click on the red shield icon and click on "Pause Protection")

    2. Open CMD.EXE

    3. Run eScan.bat

    4. Open EUpdate.ini

    5. Set value for the entry "DirectBlockAVC" to 0. If this entry is not present add this entry to the [Config] section. Save the file and restart the system.

 

After doing the above changes, eScan will prompt the user for action in case any file is detected by the Proactive Monitor.


    Method-2: (More permanent method, will be to stop registry monitoring)

    1. Pause eScan protection (Right click on the red shield icon and click on "Pause Protection")

    2. Open REGEDIT.EXE

    3. Traverse to

64-bit system --> HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MicroWorld\eScan for Windows\MwMonitor

32-bit system --> HKEY_LOCAL_MACHINE\SOFTWARE\MicroWorld\eScan for Windows\MwMonitor

    4. Set Value for the entry "RegMonitor" to 0.

    5. Restart the system.

Tags: -

Related entries:

You cannot comment on this entry